PT-2025-42392
CVE-2025-11832
·
Published
2025-10-15
·
Updated
2025-10-16
Description by
CVSS 4.0
10
CriticalMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions
Azure Access Technology BLU-IC2 versions through 1.19.5
Azure Access Technology BLU-IC4 versions through 1.19.5
Description
A flaw exists in Azure Access Technology BLU-IC2 and BLU-IC4 related to the allocation of resources without limits or throttling, enabling flooding attacks. The issue stems from unthrottled API endpoints which permit resource exhaustion.
Recommendations
Update Azure Access Technology BLU-IC2 to a version later than 1.19.5.
Update Azure Access Technology BLU-IC4 to a version later than 1.19.5.
Found an issue in the description? Have something to add? Feel free to write us 👾